This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WLFdh2O1nSvlRwnko7x5rDoSHXM.roa File: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (raw, json) Hash identifier: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214= Subject key identifier: 58:B1:5D:87:63:B5:9D:2B:E5:47:09:E4:A3:BC:79:AC:3A:12:1D:73 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F16058D00D4610D749079098C365B8F Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WLFdh2O1nSvlRwnko7x5rDoSHXM.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47172 IP address blocks: 212.102.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:05:8d:00:d4:61:0d:74:90:79:09:8c:36:5b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58b15d8763b59d2be54709e4a3bc79ac3a121d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:6a:cd:8c:40:17:1c:a7:7a:76:be:e8:f0: ca:0c:ff:04:25:41:2a:26:cf:45:7e:b0:69:f7:6a: 1d:79:c4:63:bf:9d:7a:75:98:c9:17:4a:47:66:d7: e2:71:f6:c3:16:ca:ac:b6:32:8b:dc:4a:8a:ac:b3: 7f:1f:3b:90:47:a1:6a:af:b3:32:cf:13:18:ca:3c: df:41:d3:de:ee:34:b6:19:8d:38:12:b2:5a:75:0f: 59:3d:5a:65:8a:7f:d6:ce:5f:cf:4d:11:4d:10:5d: 87:2e:7e:ac:15:53:53:c0:6c:8a:7b:e8:ed:82:9d: ec:40:bc:0d:a3:35:29:6f:d3:19:d9:86:96:2f:d6: da:ca:47:54:44:ba:94:16:4b:2c:82:de:cf:d8:61: 25:b8:31:1d:a3:7b:ae:93:1c:c8:c8:87:61:43:aa: 1b:38:7d:d7:ef:50:77:67:9b:ec:6d:7d:6f:31:16: 36:89:e9:13:ca:88:c0:55:5c:34:b0:37:a4:bb:1c: b4:cd:c2:7c:7f:b2:64:c2:b0:fa:52:bd:8e:0d:5a: 13:2a:08:32:d9:5b:cb:fe:b3:49:b2:06:7e:be:f4: 08:47:a7:b3:d6:15:e7:bf:ac:35:ab:1c:26:23:18: ad:97:2a:d6:a1:85:bc:38:13:d9:83:ac:fc:1c:b9: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:5D:87:63:B5:9D:2B:E5:47:09:E4:A3:BC:79:AC:3A:12:1D:73 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/WLFdh2O1nSvlRwnko7x5rDoSHXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.102.113.0/24 Signature Algorithm: sha256WithRSAEncryption 36:61:86:33:4c:4b:4e:58:aa:25:3e:9b:26:78:20:87:71:a7: 45:46:45:15:17:f1:77:7c:87:3d:01:e2:05:90:0c:59:5a:30: ab:df:ed:33:c3:f0:e9:d9:1a:07:6d:37:ec:d2:6f:bf:1b:58: c0:74:e9:49:c2:be:b3:80:30:84:1a:12:8a:9c:8e:2d:31:f8: 4a:15:09:9f:ef:e4:da:4b:37:11:a4:05:c2:8c:04:c6:86:a7: 25:11:65:1b:75:43:53:a4:ae:02:47:bc:e1:ff:7c:3a:a6:62: 71:1d:fa:06:14:b0:b8:70:cc:0f:d4:af:a3:fc:3d:7d:6d:17: 97:52:1c:51:9f:98:c5:05:24:87:1e:f4:b1:c0:ba:57:58:8e: 53:04:95:be:8f:c4:8e:59:01:36:cc:01:d4:81:71:f0:d1:c5: dd:d9:f4:ec:89:9f:e1:3a:72:c4:30:b9:fb:97:44:c4:d2:47: bb:f0:d7:7e:43:e4:2b:ec:f6:76:92:83:50:34:71:c9:0d:46: cf:38:42:c8:5c:6c:5d:a1:69:63:27:95:84:c3:9a:ca:83:eb: 9e:49:f1:3a:69:37:82:68:2d:53:b1:ef:9b:7d:bd:f2:8c:3c: e8:f2:fd:31:74:3c:b7:cd:ef:f5:b0:68:51:75:be:6c:3f:83: 6a:ab:09:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgWNANRhDXSQeQmMNluPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGIxNWQ4NzYzYjU5ZDJiZTU0NzA5ZTRhM2JjNzlhYzNhMTIxZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodqzYxAFxynena+6PDKDP8EJUEq Js9FfrBp92odecRjv516dZjJF0pHZtficfbDFsqstjKL3EqKrLN/HzuQR6Fqr7My zxMYyjzfQdPe7jS2GY04ErJadQ9ZPVplin/Wzl/PTRFNEF2HLn6sFVNTwGyKe+jt gp3sQLwNozUpb9MZ2YaWL9baykdURLqUFkssgt7P2GEluDEdo3uukxzIyIdhQ6ob OH3X71B3Z5vsbX1vMRY2iekTyojAVVw0sDekuxy0zcJ8f7JkwrD6Ur2ODVoTKggy 2VvL/rNJsgZ+vvQIR6ez1hXnv6w1qxwmIxitlyrWoYW8OBPZg6z8HLmWzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFixXYdjtZ0r5UcJ5KO8eaw6Eh1zMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvV0xGZGgyTzFuU3ZsUndua283eDVyRG9TSFhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZxMA0G CSqGSIb3DQEBCwUAA4IBAQA2YYYzTEtOWKolPpsmeCCHcadFRkUVF/F3fIc9AeIF kAxZWjCr3+0zw/Dp2RoHbTfs0m+/G1jAdOlJwr6zgDCEGhKKnI4tMfhKFQmf7+Ta SzcRpAXCjATGhqclEWUbdUNTpK4CR7zh/3w6pmJxHfoGFLC4cMwP1K+j/D19bReX UhxRn5jFBSSHHvSxwLpXWI5TBJW+j8SOWQE2zAHUgXHw0cXd2fTsiZ/hOnLEMLn7 l0TE0ke78Nd+Q+Qr7PZ2koNQNHHJDUbPOELIXGxdoWljJ5WEw5rKg+ueSfE6aTeC aC1Tse+bfb3yjDzo8v0xdDy3ze/1sGhRdb5sP4Nqqwkd -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:23 2026 by rpki-client